chore(deps): bump the patch group across 1 directory with 15 updates - #128
Closed
aaldersondev wants to merge 1 commit into
Closed
chore(deps): bump the patch group across 1 directory with 15 updates#128aaldersondev wants to merge 1 commit into
aaldersondev wants to merge 1 commit into
Conversation
Bumps the patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [turbo](https://github.com/vercel/turborepo) | `2.10.9` | `2.10.12` | | [jose](https://github.com/panva/jose) | `6.2.8` | `6.2.10` | | [tar-stream](https://github.com/mafintosh/tar-stream) | `3.2.0` | `3.2.1` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `4.1.10` | `4.1.11` | | [@fastify/helmet](https://github.com/fastify/fastify-helmet) | `13.1.0` | `13.1.1` | | [@nestjs/common](https://github.com/nestjs/nest/tree/HEAD/packages/common) | `11.2.1` | `11.2.3` | | [@nestjs/core](https://github.com/nestjs/nest/tree/HEAD/packages/core) | `11.2.1` | `11.2.3` | | [@nestjs/platform-fastify](https://github.com/nestjs/nest/tree/HEAD/packages/platform-fastify) | `11.2.1` | `11.2.3` | | [@simplewebauthn/server](https://github.com/MasterKale/SimpleWebAuthn/tree/HEAD/packages/server) | `13.3.2` | `13.3.3` | | [nodemailer](https://github.com/nodemailer/nodemailer) | `9.0.5` | `9.0.6` | | [@nestjs/testing](https://github.com/nestjs/nest/tree/HEAD/packages/testing) | `11.2.1` | `11.2.3` | | [@testing-library/react](https://github.com/testing-library/react-testing-library) | `16.3.2` | `16.3.3` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.4` | `19.2.5` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.1` | `8.2.2` | | [eslint-plugin-react-refresh](https://github.com/ArnaudBarre/eslint-plugin-react-refresh) | `0.5.4` | `0.5.5` | Dependabot opened this group as #126, then closed it and deleted its branch when the conflicting lockfile was replayed by hand on top of the minor group (#125). The bumps are its own, unchanged. The lockfile is Dependabot's, with #125's resolutions layered back on top — not `main`'s regenerated. Regenerating from `main` keeps the transitive resolutions it already had, and `streamx` would have stayed at 2.28.0: `tar-stream` 3.2.1 now ships its own types, drawn from `streamx`, and only 2.28.1 declares `write()` as returning a boolean. Below that, `pipeline()` in the daemon's archive code no longer typechecks. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01HiQhbiTpvjFnK7CJcJuR9m
Contributor
Author
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Reprise à la main du groupe patch que Dependabot avait ouvert en #126. Les montées sont les siennes, inchangées — 15 paquets :
turbo2.10.9 → 2.10.12 ·jose6.2.8 → 6.2.10 ·tar-stream3.2.0 → 3.2.1 ·vitest4.1.10 → 4.1.11 ·@fastify/helmet13.1.0 → 13.1.1 ·@nestjs/{common,core,platform-fastify,testing}11.2.1 → 11.2.3 ·@simplewebauthn/server13.3.2 → 13.3.3 ·nodemailer9.0.5 → 9.0.6 ·@testing-library/react16.3.2 → 16.3.3 ·@types/react-dom19.2.4 → 19.2.5 ·vite8.2.1 → 8.2.2 ·eslint-plugin-react-refresh0.5.4 → 0.5.5#126 est parti en conflit dès que le groupe minor (#125) a été mergé :
pnpm-lock.yaml, plus quelques lignes voisines dansapps/panel/package.jsonetapps/panel/web/package.json, où la version la plus haute de chaque côté a été retenue. Dependabot a fermé sa PR et supprimé sa branche pendant le rejeu — d'où celle-ci.Le lockfile vient de Dependabot, pas de
mainLe sens du rejeu compte. Régénérer le lock à partir de celui de
mainconserve les transitives déjà résolues :streamxserait resté en 2.28.0. Ortar-stream3.2.1 embarque désormais ses propres types (exports.types), qui masquent@types/tar-streamet sont écrits pourstreamx, pas pour les streams de Node. Seulstreamx2.28.1 déclarewrite()comme renvoyant un booléen ; en dessous,pipeline()dansapps/daemon/src/fs/archive.tsne typecheck plus.Le lock ici part donc de celui de Dependabot, avec les résolutions de #125 reposées par-dessus.
Vérifié en local
pnpm install --frozen-lockfile,format:check,lint,typecheck(7/7),build(5/5),test(7/7 — 737 passed / 42 skipped côté daemon, 151 côté web).🤖 Generated with Claude Code
https://claude.ai/code/session_01HiQhbiTpvjFnK7CJcJuR9m